Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 can I make user 'sa' not the sysadmin account?

Author  Topic 

triton45
Starting Member

16 Posts

Posted - 2008-11-14 : 14:29:31
I am taking over admin on a sql server box that has a legacy application running against it. In the past, the users connected as user 'sa' in their odbc settings. The application then stored the user as part of the results data. If you login with a different user, no data is shown.

Looks like I have 2 options:
1. continue to give users the 'sa' user. Does the admin account on sql server have to be the 'sa' user? Can I drop this accounts permissions to r/w?
2. Change the data. This is the preferred option, but it will take a long time to find all the locations the user is stored.

Thanks

GilaMonster
Master Smack Fu Yak Hacker

4507 Posts

Posted - 2008-11-16 : 23:07:51
No. You can't change the sa account's permissions.

What you can do is rename the sa account (if you're using SQL 2005 or 2008) and then create a new login called 'sa' with the permissions you want.
Be careful if you do that and intend to upgrade to 2008, as currently the upgrade will fail.

I would suggest if you do that, do it as a temporary measure while you're cleaning up and then delete the 'sa' account that you created. You can leave the original 'sa' renamed for enhanced security.

--
Gail Shaw
SQL Server MVP
Go to Top of Page

triton45
Starting Member

16 Posts

Posted - 2008-11-19 : 13:35:33
Thank you for the info.

Andy
Go to Top of Page
   

- Advertisement -